Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: Me1EuKfNkzO72MddUrlJuPM8n/z1lKcxqIexWUZxFRY=
Subject key identifier: 15:3D:2E:40:A9:11:B7:65:BF:5F:54:51:9E:9A:49:5D:00:1F:21:B3
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 0199FF231D10935CA462954BA3BE6E75D9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 0F13
Signing time: Mon 20 Oct 2025 01:01:55 +0000
Manifest this update: Mon 20 Oct 2025 01:01:55 +0000
Manifest next update: Tue 21 Oct 2025 01:01:55 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: QD3HzH7va5DDxZz6AMPthH3gZZ9vLq3mzKMUUiKMfzo=)
2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:23:1d:10:93:5c:a4:62:95:4b:a3:be:6e:75:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Oct 20 01:01:55 2025 GMT
Not After : Oct 21 01:01:55 2025 GMT
Subject: CN=153d2e40a911b765bf5f54519e9a495d001f21b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:64:f6:fd:0c:b1:66:86:b2:47:86:41:6e:
4d:c8:0a:ed:a1:71:ed:0a:b2:5a:e0:90:d5:80:8d:
b4:f9:c6:36:1a:8f:98:8e:43:09:b0:ba:74:98:66:
74:33:d0:0c:8b:fc:ec:7d:2a:31:f8:3f:ce:4f:d8:
9c:df:33:d6:eb:b4:3e:d7:47:d2:b0:c9:fe:02:9c:
49:d0:d0:93:5f:47:ae:90:f8:5c:54:35:65:52:33:
86:9d:c1:62:41:46:a4:a4:7a:07:24:e1:9d:a9:d7:
e8:5c:3f:f7:48:11:e4:d3:67:21:ae:79:99:55:72:
b9:70:9a:8e:9b:4b:c7:f5:b2:5c:41:38:86:47:83:
f8:9f:b3:2a:06:a8:7d:11:30:38:ea:98:3c:71:61:
2f:45:55:97:dd:3f:e5:15:b4:c8:dc:a5:22:82:63:
29:85:e2:32:96:b5:49:b6:bf:f8:77:e7:82:a6:15:
5e:36:b6:86:d6:2f:0e:32:8b:a5:f7:96:e6:cb:4b:
f1:62:ed:6b:0a:23:70:95:7a:6b:05:c1:5d:4e:cb:
e2:02:c5:32:3d:49:25:a4:9d:44:b8:d1:fa:eb:66:
d6:d7:2b:57:2a:e8:ea:49:aa:ac:69:bb:82:cd:ba:
26:6c:43:4c:e6:35:49:47:16:dd:69:63:37:41:e1:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:2E:40:A9:11:B7:65:BF:5F:54:51:9E:9A:49:5D:00:1F:21:B3
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f5:c2:67:30:0e:54:00:82:e6:cd:ec:84:38:54:8f:74:e7:
b4:4c:b5:88:de:38:fd:96:e3:2b:4d:7c:67:b3:cd:eb:06:9c:
ec:2b:d4:c8:f8:dc:72:69:96:55:6c:aa:0d:52:87:32:b8:b5:
1a:49:be:8c:de:7b:66:af:da:a1:98:61:13:98:52:fd:90:49:
59:56:31:9a:03:2b:aa:3d:b8:46:ee:8b:2e:2b:1a:ad:e0:e5:
b6:49:b0:af:01:87:98:a7:49:b2:4b:b3:22:75:59:31:e6:3a:
34:35:d3:bf:f1:19:10:9c:6a:ac:d8:70:60:4f:19:72:bd:bf:
29:07:d4:7a:58:f4:f5:d7:90:04:74:d4:8a:71:b1:20:1a:c3:
63:85:f5:dc:3b:c5:20:cc:5b:8f:81:ba:c8:12:24:d1:92:63:
ab:1c:9b:94:65:74:52:4d:58:9b:fc:0e:26:0b:80:42:a7:65:
a8:8f:b3:88:f8:1f:37:ea:bd:08:75:71:62:57:09:ac:f2:68:
a8:9d:3d:dd:1b:15:5e:08:96:61:dc:6c:23:d7:25:86:8a:f6:
bf:d0:1e:b6:98:ad:53:21:80:ae:fb:3c:4b:6b:7b:22:ef:55:
f9:2a:d0:71:0d:c4:63:dd:54:cc:88:2d:dd:7e:5a:9b:a3:69:
97:3d:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:43:11 2025 by rpki-client